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DETAILED ACTION 

1. Claims 1-13 and 15-22 remain for examination. The correspondence filed 
8/28/08 amended claims 1, 9-13, 15-17, 19, and 20. 

Response to Arguments 

2. Applicant's arguments, see the amendment filed 8/28/08, with respect to the 
rejection(s) of claim(s) 1 -22 under 35 USC 1 02(e) in view of Atsmon have been fully 
considered and are persuasive. Therefore, the rejections have been withdrawn. 
However, upon further consideration, a new ground(s) of rejection is made in view of the 
newly discovered reference to Antebi. 

Claim Rejections - 35 USC § 103 

3. The text of those sections of Title 35, U.S. Code not included in this action can 
be found in a prior Office action. 

4. Claims 1 -1 3 and 1 5-22 are rejected under 35 U.S.C. 1 03(a) as being 
unpatentable over Atsmon et al. (U.S. Patent 6,607,136) in view of Antebi etal. (U.S. 
Patent 7,334,735). 

Regarding claims 1 and 16: 

Atsmon discloses a method and apparatus for securing online transactions on 
the Internet comprising: a smart card transmitting an identification sequence to the 
microphone input of the PC in the form of a modulated signal (element 10 of Figure 1; 
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col. 31, lines 29-55; modulated signals at col. 11, lines 1-3 and col. 31, lines 10-15); a 
connector connecting an output of the smart card transmission to the microphone input 
of the PC soundcard: (The microphone: col. 3, lines 45-63; element 1 1 2 of Figure 1 1 ) 
and a PC applet, executed by the PC, demodulating the identification sequence (col. 32, 
lines 25-50 and 64-67). 

Although Atsmon discloses providing modulated voltage signals to the 
transmission unit (e.g. col. 11, line 55 -col. 15, line 25), the reference as cited teaches 
converting the voltage signal into an acoustic signal prior to the actual transmission 
step. However, Antebi discloses a derivative smart card to that disclosed by Atsmon, 
which discloses an alternative embodiment to the acoustic transmission wherein the 
smart card is directly connected to the computer via a cable (col. 14, lines 55-67; cf. the 
NPL references from the Office Action of 5/15/07 as indicated) through their respective 
audio jacks provided for that purpose (col. 12, lines 1-15). The claim is thus obvious 
because the substitution of the cable, which would allow the direct transmission of the 
modulated voltage signals to the microphone input of the computer, in lieu of the 
acoustic transformation steps disclosed by the original prior art, would have yielded 
predictable results to one of ordinary skill in the art at the time of the invention. 

Regarding claim 2 and 17: 

Atsmon further discloses wherein the identification sequence comprises at least 
a unique card number (col. 1 6, lines 30-31 ) and a random number valid only once (col. 
81, lines 45-50). 
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Regarding claim 3 and 18: 

Atsmon further discloses wherein the random number is a session key which is 

not transmitted to the authentication server (col. 16, lines 33-35). 

Regarding claim 4 and 19: 

Atsmon further discloses wherein the session key is a function of the previous 
one emitted by the card (col. 16, lines 60-65). 

Regarding claim 5 and 20: 

Atsmon further discloses wherein the session key is used by the PC applet to 
generate a message authentication code of the password entered by the user; said first 
MAC is transmitted to the authentication server along with the card number (col. 52, 
lines 30-45; see also col. 32, lines 64-67). 

Regarding claim 6 and 21 : 

Atsmon further discloses wherein the server generates a second MAC of the 
password stored in the server authentication database.using a session key deduced 
from the previous session key also stored in the database (col. 60, lines 20-38; see also 
col. 16, lines 60-67). 
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Regarding claim 7 and 22: 

Atsmon further discloses wherein the authentication is valid only if said first and 

second MAC are identical; and wherein the authentication server replaces Ki-1 with Ki 

and Ki cannot be reused (col. 78, lines 11-38). 

Regarding claim 8: 

Atsmon further discloses wherein the smart card is powered by the voltage 
provided by the microphone input of the PC sound card (col. 3, lines 52-57). 

Regarding claim 9: 

Atsmon further discloses wherein the smart card transmits the modulated signal 
when the switch of the card reader is pressed by the user (col. 28, lines 6-18). 

Regarding claim 10: 

Atsmon further discloses wherein at least one embodiment of the invention 
conforms to the ISO standards for smart cards (col. 25, lines 10-15). Consequently, it is 
inherent to such embodiments that the smart card transmits the modulated signal to the 
microphone input through ISO contact C6 (see also the IS07816 reference, page 3). 

Regarding claim 11: 

Atsmon further discloses wherein at least one embodiment of the invention 
conforms to the ISO standards for smart cards (col. 25, lines 10-15). Consequently, it is 
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inherent to such embodiments that the smart card transmits the modulated signal when 
the ISO contact C2 is pulled down (see also the IS07816 reference, page 3). 

Regarding claim 13: 

Atsmon further discloses wherein the card reader further comprises a battery cell 
powering the card (col. 3, lines 52-57; see also element 251 of Figure 26). It is inherent 
to the SoundBlaster cards used in the preferred embodiment of Atsmon (col. 31, lines 
30-35) that they possess line inputs which exist as alternatives to plug other 
miscellaneous devices into (for illustration, see the previously cited Creative Sound 
Blaster manual, page 1-7). Also see MPEP 2163.07(a). 

Regarding claim 15: 

Atsmon further discloses wherein the card reader is further integrated into the PC 
unit (col. 3, lines 48-52). 

5. Claim 12 is rejected under 35 U.S.C. 103(a) as being unpatentable over Atsmon 
in view of Antebi as applied to claim 1 1 above, and further in view of ISO 7816. 

Regarding claim 12: 

Atsmon further discloses wherein at least one embodiment of the invention 
conforms to the ISO standards for smart cards (col. 25, lines 10-15). The ISO discloses 
only one set of power contacts for one power source (C1 and C5, ISO 7816, page 3, 
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section 2.2.3). However, Atsmon has an embodiment where the smart card is in 
contact with multiple power sources exist: both a battery on the card (element 251 of 
Figure 26) and a power supply in the reader (col. 3, lines 52-57); furthermore, contacts 
C4 and C8 were left reserved for future use. (see ISO 7816, page 4, section 2.3.1). It 
would have been obvious to use those contacts to allow both power sources to be 
connected to the card simultaneously, not only because all the claimed elements were 
known in the prior art, and one skilled in the art could have combined the elements as 
claimed with no change in their respective functions, and the combination would have 
yielded predictable results to one of ordinary skill in the art at the time of the invention; 
but also that one would be motivated to do so in order to allow the card to recharge the 
battery (Atsmon, col. 3, lines 52-57). 



Conclusion 

6. The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure: 

• U.S. Patent 6,505,266 to Gu 

• U.S. Patent 6,21 2,272 to Herschler et al. 

• U.S. Patent 6,1 22,355 to Strohl 

• U.S. Patent 5,799,036 to Staples 

7. Applicant's amendment necessitated the new ground(s) of rejection presented in 
this Office action. Accordingly, THIS ACTION IS MADE FINAL. See M PEP 
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§ 706.07(a). Applicant is reminded of the extension of time policy as set forth in 37 
CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1 .136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the date of this final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Thomas Gyorfi whose telephone number is (571)272- 
3849. The examiner can normally be reached on 8:30am - 5:00pm Monday - Friday. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Kim Vu can be reached on (571) 272-3859. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
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For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 
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11/3/08 
/Kimyen Vu/ 

Supervisory Patent Examiner, Art Unit 2435 



